Role :: InfoSec Governance Manager
Location :: Las Vegas, NV
Contract
we are looking for candidates Local to Las Vegas / ready to relocate in month or 2. For now its remote.
JD ::
Dynamic Information Security Governance Manager that enjoys working on security challenges. This person will be responsible for establishing an Information Security governance framework, implementing security compliance programs with a strong focus on Credit compliance and the protection of sensitive data including the Personal Identifiable Information of employees and customers.
Responsibilities:
• Responsible for creating and rolling out Information Security policies and standards. Responsible for aligning security requirements with business objectives and understanding applicable alignment with security and risk compliance frameworks. Support and manage the enterprise information security controls framework as well as work with global stakeholders on corresponding policies, procedures, and standards (ISO27001).
• Lead the compliance program, including technical controls implementation, gap identification, and liaising with PCI QSA auditors. Serve as a cross-functional project lead in support of PCI compliance objectives and ensures internal teams are prepared for assessments, deliverables, and due dates needed to meet annual compliance requirements.
• Understand Data Privacy regulations - e.g., PII - Personal Identifiable Information, and implement solutions to meet those regulations. Develop necessary capabilities, standards, and services, in partnership with Marketing, Product, and Technology departments, to protect sensitive information effectively.
• Engages with business units to identify risks and track the implementation of risk mitigation plans. Assesses risk management tools, techniques, and procedures to enhance risk management capabilities throughout the enterprise.
• Supports the development of metrics for the Information Security risk management reporting dashboard including the status of the security governance, risk remediation, and audit compliance efforts
• Assist in the implementation of governance and risk management solutions to automate processes and workflows.
• Represent the information security program during contract negotiations. Participate in and support Third-Party Risk Assessment activities of prospective and existing vendors.
• Provide input and direction into the development and maintenance of the Disaster Recovery and Business Continuity Plans
Requirements:
• 5+ years of experience required in the relevant field
Expertise in Information Security Governance Risk and Compliance is required.
• Experience with information security controls frameworks (NIST 800-53, ISO27001, PCI-DSS).
• Data privacy and protection experience is highly preferred (GDPR, CCPA/CPRA).
• Experience executing information security risk assessment methodologies and familiarization.
• Experienced in assessing security risks in modern cloud Software as a Service (SaaS), Platform as a Service (SaaS), and Infrastructure as a Service (IaaS) technologies.
• Experienced with evaluating and validating controls around the full technology stack from application, operating system, database, and networking layers.
• Expertise in technical and business environment, familiarity with security standards, experience with business continuity, disaster recovery, auditing, risk management, vulnerability assessments, and cyber-security and incident management.
• Ability to work closely with people at all levels of the organization and facilitate the implementation of corrective action as needed.
• Ability to analyze, communicate, articulate risk, governance, and compliance trends and program requirements.
• Excellent written and verbal communications, critical thinking skills, effective interpersonal skills, strong formal presentation abilities.
• Minimum of 5 years experience in Information Security Governance Risk and Compliance role, preferably in the retail sector.
• Certification of either CISSP or CISM is preferred.
No comments:
Post a Comment
Thanks
Gigagiglet
gigagiglet.blogspot.com